Move the global hosts_allow() check out of the processing loop: